This job has closed.

ChatGPT Jobs · 2 days ago

Security Operations Analyst- East or Central Time Zone

United States

Full-time

Remote

Entry, Mid Level

$100K/yr - $120K/yr

2+ years exp

Huntress is a fully remote cybersecurity company on a mission to protect businesses with enterprise-grade cybersecurity solutions. They are seeking a Security Operations Center Analyst to triage, investigate, respond to, and remediate cyber intrusions, while working in a collaborative environment to enhance security measures.

Computer Software

Responsibilities

Triage, investigate, and respond to alerts coming in from the Huntress platform

Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine the root cause of attacks, where possible, and provide remediations needed to remove the threat

Perform tactical malware analysis as part of investigating and triaging alerts

Investigate suspicious Microsoft M365 activity and provide remediations

Assist in escalations from the Product Support team for threat-related and SOC-relevant questions

Contribute to detection engineering creation and tuning efforts

Contribute to projects focused on driving better outcomes for our analysts and partners

Contribute to our collaboratively mentored team (we're all here to make each other better!)

Qualification

SOC experienceWindows AdministrationMalware analysisLinux experienceMacOS experienceThreat Actor toolsNetworking conceptsWeb technologiesCuriosityScripting languagesCloud investigationsEffective communicationCustomer focus

Required

2+ years of experience in a SOC or Digital Forensics (DFIR) role

Demonstrated experience with Windows, Linux, and MacOS as an attack surface

Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)

Demonstrated experience with static and dynamic malware analysis concepts

Working knowledge of Windows Administration or Enterprise Domain Administration + Active Directory, Group Policy, Domain Trusts, etc

Working knowledge of core networking concepts + Common ports/protocols, NAT, Public/Private IPs, VLANs, etc

Working knowledge of web technologies and concepts + Web servers/applications, OWASP top 10, etc

Effective communication skills, with the ability to explain complex events to less technical audiences, enabling effective cross-functional collaboration within the SOC and across departments

Dedicated to prioritizing and addressing customer needs and concerns in all decision-making processes

A strong sense of curiosity and a genuine excitement for learning